You can find a method to continue mining the virtual currency even if you close the browser by secretly borrowing the PC resource of the website visitor


byLuca Bravo

There is a script that miners (mining) the virtual currency that continues to expand with the momentum of recent years with the machine power of the computer used by the user visiting the website. It has been discovered how to make such scripts even more violent and continue mining the virtual currency secretly using the user's PC resources even if the web browser is closed.

Persistent drive-by cryptomining coming to a browser near you - Malwarebytes Labs | Malwarebytes Labs
https://blog.malwarebytes.com/cybercrime/2017/11/persistent-drive-by-cryptomining-coming-to-a-browser-near-you/

Cryptocurrency Mining Scripts Now Run Even After You Close Your Browser
https://thehackernews.com/2017/11/cryptocurrency-mining-javascript.html

Nasdaq starts futures trading in 2018The virtual currency like Bitcoin (Bitcoin) reported up to and, even by huge prices, even hackers and legitimate web site operators are even misleading. A JavaScript-based virtual currency mining service is being used that leases machine power to mining bit coins and other virtual currencies from the computer used by website visitors.

"The Pirate Bay", the world's most popular torrent download site, uses Coinhive, a browser-based virtual currency mining serviceIt is clearSo, thousands of websites are trying to earn income by using browser-based virtual currency mining services instead of banner advertisements.

Will the popular site become a source of income instead of virtual currency mining and advertisement with the CPU power of the viewer using the large number of accesses? - GIGAZINE


However, these kinds of virtual currency mining services can mining virtual currency when a user is visiting a website, but if you close the browser window and leave the site , You will lose access to computer resources for mining, that is, mining work will stop. However, security researchers at Malwarebytes, which develop anti-virus software, are new and discover the existence of a website with a tricky trick that can continue running virtual currency mining software in the background even if the browser window is closed I will.

byCarlos Muza

The website that Malwarebytes reported at the end of November 2017 was hidden behind the taskbarPop underBy using the window, continue mining the virtual currency using PC machine power. I can understand what it is like by following one GIF image by one shot. Normally, closing the browser causes the CPU usage rate to decrease as the mining work ends, but the usage rate has not decreased in the following GIF images, the pop-under window is hidden behind the lifting of the task bar , And it continued mining using this.


Although it seems to be a very simple method if known, it is difficult for the researchers to distinguish this method, and it will bypass most advertisement blockers because it is skillfully hidden. The virtual currency extraction excavation is executed from the engine hosted on Amazon Web Servers. Also, the code executed on the pop-under window has a small aspect that it is set to keep the threshold at the middle level so that it can not be started from the CPU usage rate It is. Note that this method works with the latest version of Google Chrome that runs on the latest versions of Windows 7 and 10.

"Because this kind of pop-under is designed to bypass ad blockers, it is very difficult to distinguish, just pressing" x "and closing the browser is no longer sufficient." , Jerome Segura, chief malware information analyst for Malwarebytes.

byMarkus Spiske

Security related news mediaThe Hacker NewsThe countermeasure that is mentioned is to find the browser window of the task bar and simply close it if there is an icon there. As a more advanced solution, it is said to start the task manager to confirm that there is no remaining browser process remaining.

At the time of article creation, the web browser itself does not block virtual currency mining, so you can also use an antivirus program that automatically blocks the virtual currency mining on the web page you want to access. Alternatively,No CoinThere is also a way to block mining using extensions of browsers like.

in Software,   Security, Posted by logu_ii